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Top Stories 

• A severe storm November 17 in the Northwest left 3 people dead, caused power outages 
for more than 366,000 people, and closed several highways, among other disasters. - 
Associated Press (See item 1 ) 

• A 5-alarm fire November 17 at the Lubrizol Corporation site in Pennsylvania prompted an 
evacuation of more than 70 area homes, injured 8 people, and left HAZMAT crews onsite 
for several hours containing the incident. - WPXI 11 Pittsburgh (See item 2 ) 

• Company executives from the Dallas-based USPlabs were charged with 1 1 counts of wire 
fraud, mail fraud, and conspiracy November 17 for unlawful sale of dietary supplements. - 
USA Today (See item 9 ) 

• Washington College in Maryland was evacuated November 17 and classes were cancelled 
November 18, while police searched for a student reportedly armed with a rifle. - 
Baltimore Sun (See item 15 ) 
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Energy Sector 



1. November 18, Associated Press - (National) 3 killed, thousands without power in 
Northwest windstorm. A severe storm November 17 that moved across Oregon, 
Idaho, Washington, and Colorado in the Northwest left at least 3 people dead, knocked 
out power for more than 366,000 customers, closed several interstates and highways, 
prompted the cancellation of ferry trips, flooded area rivers, and closed school 
campuses. 

Source: http://www.msn.com/en-us/news/us/3-killed-thousands-without-power-in- 
northwest-wind-storm/ar-BBn9fxT 



Chemical Industry Sector 

2. November 18, WPXI 11 Pittsburgh - (Pennsylvania) 5-alarm blaze destroys 
industrial building, prompts evacuation in Leetsdale. The Lubrizol Corporation 
owned- Oilfield Chemistry site sustained extensive damage November 17 following a 
5-alarm fire at its Leetsdale facility that injured 8 people, prompted an evacuation of 
more than 70 surrounding homes, and left HAZMAT crews and multiple fire 
departments onsite for several hours containing the incident after two chemicals were 
released in the air. An investigation is ongoing to determine the cause of the fire. 
Source: http://www.wpxi.com/news/news/local/crews-battling-3-alarm-fire-oil-and- 
gas-service-co/npPjQ/ 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

Nothing to report 

Defense Industrial Base Sector 

Nothing to report 

Financial Seryices Sector 

3. November 17, Fort Myers News-Press - (Florida) Fort Myers man faces 120 years in 
prison for bank fraud. A Fort Myers man pleaded guilty November 17 to four counts 
of bank fraud after orchestrating a nearly $1.6 million check-kiting scheme in 2011 by 
profiting from fraudulent checks and auto loans procured through Coral Auto Sales, his 
used car business. An FBI investigation also revealed that the suspect tried to destroy 
20 banker’s boxes of incriminating evidence from his home. 

Source: http://www.news-press.com/storv/news/crime/2015/ll/17/fort-myers-man- 
faces-30-years-prison-bank-fraud-roger-eugene-hagood-check-kiting/75957716/ 

4. November 17, Associated Press - (National) Woman admits to role in nationwide 
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credit card theft scheme. A California woman pleaded guilty in Federal court 
November 17 for her role in a nationwide credit card fraud scheme to steal 94,000 
credit and debit cards by replacing point-of-sale systems with counterfeit devices 
equipped with wireless technology at 80 Michaels stores in 19 states with the intention 
to steal bank accounts and collect consumers’ personal identification number (PIN). 
Source: http://www.sacbee.com/news/state/california/article45258012.html 

5. November 17, Minneapolis Star Tribune- (Minnesota) Minnesota couple plead guilty 
to huge tax scam. A Minnesota couple pleaded guilty November 16 to a $1.8 million 
tax fraud scheme in which the pair used their tax filing and immigration service, 
American Group, to file fraudulent tax returns on behalf of 1,000 people in Minnesota 
and Florida. 

Source: http://www.startribune.com/minnesota-couple-plead-guiltv-to-huge-tax- 
scam/35 1095731/ 



For another story, see item 9 

Transportation Systems Sector 

6. November 18, USA Today; Arizona Republic; Associated Press - (International) Two 
U.S.-to-Paris Air France flights diverted due to threats. An Air France flight headed 
to Paris from Los Angeles was diverted to Salt Lake City, while a second Air France 
flight headed to Paris from Dulles Airport in Virginia was diverted to Canada due to 
similar, anonymous threats November 17. Authorities evacuated the planes and deemed 
both safe after nothing suspicious was found. 

Source: http://www.usatodav.com/storv/news/2015/ll/17/reports-two-air-france- 
flights-diverted/75970348/ 

7. November 17, WCAU 10 Philadelphia - (Pennsylvania) Person dies in tractor- trailer 
crash on Pennsylvania Turnpike. Westbound lanes of the Pennsylvania Turnpike 
between Downingtown and Morgantown in Chester County were closed for several 
hours November 17 due to an accident involving semi-truck that crashed into the 
median, killing the driver. 

Source: http://www.nbcphiladelphia.eom/news/local/Tractor-Trailer-Crash-Chester- 
County-West-Nantmeal-Township-Pennsylvania-Tumpike-l -Dead-351 197651.html 

8. November 17, South Florida Sun-Sentinel - (Florida) Truck crash, diesel spill slows 
Tuesday’s commute on 1-75 through Weston. Interstate 75 in Broward County was 
shut down for 2 hours November 17 while crews cleared the wreckage of a semi-truck 
that jackknifed, ruptured the fuel tank, and spilled 50 gallons of diesel fuel onto the 
roadway. 

Source: http://www.sun-sentinel.com/local/broward/fl-weston— i75-tractor-tr ailer-crash- 
20151117-storv.html 



For another story, see item 1 
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Food and Agriculture Sector 



9. November 18, USA Today - (National) USPlabs charged in money laundering, wire 
fraud case. Company executives from the Dallas-based USPlabs, a dietary supplement 
company, were charged with 1 1 counts of wire fraud, mail fraud, and conspiracy 
November 17 for allegations that the company modified product packaging, labeling, 
and certificates of analysis to mislead customers about the efficacy of the products, 
many of which were made using undeclared, synthetic ingredients from China. 

Source: http://www.usatodav.com/storv/news/2015/ll/17/supplements-charges-iustice- 
investigation/75943252/ 

10. November 17, U.S. Food and Drug Administration - (National) Ashdon Farms issues 
allergy alert on Honey Mustard Pretzel Mix and Honey Mustard Mix. Waukesha, 
Wisconsin-based Ashdon Farms issued a nationwide recall November 17 of all 7-ounce 
bags of Girl Scouts of the USA brand Honey Mustard Pretzel Mix and its 8-ounce bags 
of Ashdon Farms brand Honey Mustard Mix due to undeclared milk allergens. The 
products were distributed through fund-raising drives. 

Source: http ://www .fda. go v/Safetv/Recalls/ucm4732 1 6 .htm 

11. November 17, KAAL 6 Austin - (Iowa) All clear after ammonia leak at Rochester ice 
cream plant. An ammonia leak discovered by a passerby at the Kemps ice cream plant 
in Rochester November 17 forced a part of North Broadway to shut down for 3 hours 
and prompted the evacuation of numerous area businesses. Crews contained the 
incident and the cause of the leak was due to a valve failure in the plant’s freezer 
system. 

Source: http://www .kaaltv.com/article/stories/s3966437. shtml 

Water and Wastewater Systems Sector 

See item 1 

Healthcare and Public Health Sector 

12. November 17, U.S. Department of Labor - (Virginia) OSHA issues notices to Hunter 
Holmes McGuire VA Medical Center for exposing workers to unsafe workplace. 
The Occupational Safety and Health Administration reported November 17 that it 
issued 4 willful, 2, serious, and 8 other-than-serious safety violations to the Hunter 
Holmes McGuire Veterans Affairs Medical Center in Richmond after a November 6 
investigation determined that the medical center was providing inadequate protection 
for employees exposed to workplace hazards while providing patient care. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29052 

Government Facilities Sector 

13. November 18, KTMF 23 Missoula - (Montana) Power outages force several schools 
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to close. A power outage November 18 prompted the closure of schools in Kilah, 
Superior, West Glacier, and Libby, while crews worked to restore service across 
western Montana. 

Source: http://www.abcfoxmontana.eom/storv/30548540/power-outages-force-several- 
schools-to-close 



14. November 17, Tallahassee Democrat - (Florida) Gadsen Street downtown reopened 
after bus crash. Eight Highland’s Elementary School students and 2 adults were 
transported to an area hospital with injuries following an accident involving 2 charter 
buses near an intersection in Tallahassee, Elorida, November 17. 

Source: http://www.tallahassee.com/storv/news/2015/ll/17/gadsden-street-downtown- 
blocked-after-bus-crash/75950394/ 



15. November 17, Baltimore Sun - (Maryland) Washington College shut down as police 
look for student facing gun charges. Students from Washington College in Maryland 
were evacuated November 17 and classes were cancelled November 18, a third 
consecutive day in a row while police search for a student reportedly armed with a rifle, 
who is facing criminal charges for allegedly showing a pistol to a classmate at the 
Eastern Shore school. The student’s parents alerted authorities after he left home with a 
rifle November 16. 

Source: http://www.baltimoresun.com/news/maryland/eastem-shore/bs-md- 
washington-college-tuesdav-2015 1 1 17-story.html 

Eor another story, see item 1 

Emergency Services Sector 

16. November 17, KPTV 12 Portland - (Oregon) Inmate escapes from North Bend 
minimum-security prison. Authorities are searching for an inmate who escaped from 
the Shutter Creek Correctional Institution in North Bend November 17. 

Source: http://www.kptv.eom/storv/30543807/inmate-escapes-from-north-bend- 
minimum-security-prison 

Information Technology Sector 

17. November 18, The Register - (International) Blackhole’s back: Hated exploit kit 
returns from the dead. Researchers from Malwarebytes discovered that the previously 
extinct Blackhole Exploit Kit has resurfaced after finding an active drive-by download 
campaign via compromised Web sites with the same Adobe Java platform and PDE 
exploits as the Blackhole Exploit Kit, which can still compromise vulnerable computers 
despite its old exploits. 

Source: 

http://www.theregister.co.uk/2015/ll/18/blackhole exploit kit back from dead/ 

18. November 18, Securityweek - (International) Security flaws in LastPass exposed user 
passwords. EastPass security team released patches addressing a series of bugs and 
design flaws, discovered by two researchers from Salesforce, that could have been used 



-5 - 



to exploit user passwords through an attack against LastPass via various vectors 
including a special disable one-time password (dOTP) that can be used for 
authentication to access the encrypted vault key and decrypt it, and bypass IP 
restrictions and two-factor authentication (2FA), as well as using custom_js to inject 
and execute JavaScript code on login pages of Web sites. 

Source: http://www.securitvweek.com/securitv-flaws-lastpass-exposed-user-passwords 

19. November 17, Securityweek - (International) Adobe issues security fixes for 
ColdFusion, LiveCycleDS, Premiere Clip. Adobe released a series of updates 
addressing security vulnerabilities in several of its products including ColdFusion, 
which resolved two input validation issues that may be used in reflected cross-site 
scripting (XSS) attacks; LiveCycleDS, which resolved a server-side request forgery 
vulnerability; and Premiere Clip products, which patched an input validation issue in a 
mobile application that allows Apple iOS users to create or edit videos on mobile 
devices. 

Source: http://www.securitvweek.com/adobe-issues-securitv-fixes-coldfusion- 
livecycleds-premiere-clip 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

20. November 18, Chicago Tribune - (Illinois) Extra-alarm fire destroys Bronzeville 
stores: ‘There ain’t gonna be work tomorrow.’ A 2-alarm fire in Bronzeville 
destroyed a commercial strip housing Roger Pharmacy, the Dollar City store, a tax 
preparation firm, and other businesses November 17 after the fire began in the Dollar 
City store and spread to other businesses, which prompted the closure of surrounding 
roads for more than 2 hours and left 4 fire departments to remain onsite for 4 hours. 
Officials are investigating the cause of the incident. 

Source: http://www.chicagotribune.com/news/local/breaking/ct-bronzeville-fire- 
20151118-storv.html 

21. November 17, Tampa Bay Times - (Florida) FBI arrests Seminole man for 
threatening Pinellas mosque - and leaving his name. The FBI reported that a 
Seminole man was arrested on a Federal charge for making telephone threats to kill, 
injure, or intimidate using fire or an explosive November 17 after the man left two 
threatening voicemails to the Islamic Society of Pinellas County and the Islamic 
Society of St. Petersburg November 13. 
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Source: http://www.tampabav.com/news/publicsafety/crime/fbi-arrests-seminole-man- 
accused-of-calling-in-threats-to-two-pinellas/22543 1 1 

For additional stories, see items 1 and 11 

Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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